arXiv:1508.05674v2 [cs.IT] 1 Sep 2015 


1 


Two infinite classes of rotation symmetric bent 
functions with simple representation 

Chunming Tang, Yanfeng Qi, Zhengchun Zhou, Cuiling Fan 


Abstract 

In the literature, few n-variable rotation symmetric bent functions have been constructed. In this paper, we present two infinite 
classes of rotation symmetric bent functions on F 2 of the two forms: 

(i) f{x) = XiXi+m + y{xo + Xm, ' ' ' , 2:^-1 + X 2 m-l), 

(ii) ftix) = + XiXi+t) + XiXi + m + 7(^0 + Xm, ' ' ' , Xm-l + X2m-l), 

where n = 2m, ^(XojXi, ■ ■ ■ ,Xm-i) is any rotation symmetric polynomial, and m/gcd(m,t) is odd. The class (i) of rotation 
symmetric bent functions has algebraic degree ranging from 2 to m and the other class (ii) has algebraic degree ranging from 3 
to m. 


Index Terms 

Bent functions, rotation symmetric bent functions, the Maiorana-McFarland class of bent functions, algebraic degree. 

I. Introduction 

Boolean bent functions introduced by Rothaus El in 1976 are an interesting combinatorial object with the maximum 
Hamming distance to the set of all affine functions. Such functions have been extensively studied because of their important 
applications in cryptograph (stream ciphers IS)), sequences 13^ . graph theory ll35l . coding theory ( Reed-Muller codes m, 
two-weight and three-weight linear codes |jT|, IfTTI ). and association schemes ||36l. A complete classification of bent functions 
is still elusive. Further, not only their characterization, but also their generation are challenging problems. Much work on bent 
functions are devoted to the construction of bent functions m, 0, a, a, a, im, m, csi, m, am, am, am, am, 

am, am, am, am, am, am, am, am, am. 

Rotation symmetric Boolean functions, introduced by Pieprzyk and Qu 041 . are invariant under circular translation of indices. 
Due to less space to be stored and allowing faster computation of the Walsh transform, they are of great interest. They can be 
obtained from idempotents (and vice versa) HD, am. Characterizing and constructing rotation symmetric bent functions are 
difficult and have theoretical and practical interest. The dual of a rotation symmetric bent function is also a rotation symmetric 
bent function. In the literature, few constructions of bent idempotents have been presented, which are restricted by the number 
of variables and have algebraic degree no more than 4. See more rotation symmetric bent functions in jT], 0, lfT4l . ||2TI . lim . 

El, iQ). 

Quadratic rotation symmetric bent functions have been characterized by Gao et al. IITTI . They proved that the quadratic 
function 

m —1 n—1 771—1 

E ^ 171 + j ) 

i=l j=0 j=0 

is rotation symmetric bent if and only if the polynomial is coprime with X"-|-l, where Ci G F 2 . 

Stanica et al. ||38l conjectured that there are no homogeneous rotation sysmetric bent functions of algebraic degree greater 
than 2. The construction of rotation symmetric bent functions of algebraic degree greater than 2 is an interesting problem 0. 
Charnes et al. Eol constructed homogeneous bent functions of algebraic degree 3 in 8, 10, and 12 variables by applying the 
machinery of invariant theory. Up to now, there are few known constructions of rotation symmetric bent functions. Gao et al. 
ET\ constructed an infinite class of cubic rotation symmetric bent functions of the from 

71—1 771 — 1 

ft (^0; ^1; * ‘ ' 1 ^71— 1) — ^ ^ ) 4“ ^ ^ 

z—0 z—0 

where 1 < f < m — 1 and m/gcd{m,t) is odd. Carlet et al. I?) presented n-variable cubic rotation symmetric bent functions 
of the form 

71 — 1 2r —1 771 — 1 

f (^0) ^ 1 5 ‘ * 5 ^71—1) — ^ ^ ^z^z+r^z+2r ^ ^ ^ ^ ^z^z+m ? 

z—0 z—0 z—0 
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where n = 2m = 6r. Carlet et al. m proposed an infinite class of quartic rotation symmetric bent functions from two known 
semi-bent rotation symmetric functions by the indirect sum. Su and Tang POl gave a class of n-variable rotation symmetric 
bent functions of any possible algebraic degree ranging from 2 to n /2 of the form 

m—1 m — 1 

+ Y1 n 

i=0 <5gA/3'ffl/3"eC>„(5) i=0 

where 

. ^ e F^. 

• On{6) is the orbit of S by cyclic shift. 

• A is a subset of the representative elements of all the orbits OmiS). 

. P' = and/3" = (/3",/3",-.. ,/3"_i). 

• ffl denotes the sum over Z. 

These functions contain functions by Carlet et al. Q. 

Motivated by the constructions of Gao et al. ED and Su et al. iQi, this paper constructs new rotation symmetric bent functions 
from some known rotation symmetric bent functions. We obtain two infinite classes of rotation symmetric bent functions which 
are equivalent to functions in the class of Maiorana-McFarland. Let 7(^01 • • • j be a rotation symmetric polynomial 

in F 2 [Xo, Xi, ■ ■ ■ , Xm-i], i.e., 7 (^ 0 j ‘‘ = 7 (-^i) ‘‘ , Xm-i, Xq). We obtain two classes of rotation symmetric 

bent functions of the form 

m — 1 

f (^) — ^ ^ “t“ “h Xjn-) ‘ ' : ^m—1 ; 

i^O 

n — 1 m—1 

+ X^X,+t) + + ^m-) ‘ ’ 7 ^m —1 “1“ ^2m —1)5 

2—0 2—0 

where 1 < f < m — 1 and m/gcd{m,t) is odd. In fact, these bent functions belong to the Maiorana-McFarland class of bent 
functions. 

The rest of the paper is organized as follows: Section 2 introduces some basic notations, Boolean functions, rotation symmetric 
bent functions. Section 3 presents the constructed rotation symmetric bent functions. Section 4 proves main results on rotation 
symmetric bent functions. Section 5 makes a conclusion. 

II. Preliminaries 

Let F 2 denote the n-dimensional vector space over the finite field F 2 . An n-variable Boolean function /(xq, xi, - ■ ■ , Xn-i) 
is a mapping from F 2 to F 2 . And f{xo,xi, ■ ■ ■ ,Xn-i) can be represented by a polynomial called its algebraic normal form 
(ANF): 

n — 1 

f{xo,Xi- ■ ■ ,Xn-l) ^ (2) 

22^1^2 ^—0 

where u = (/3o, /3i, • • • , Pn-i) and Cu G F 2 . The number of variables in the highest order product term with nonzero coefficient 
is called its algebraic degree. 

For simplicity, we call polynomials in F 2 [a:oj 2 :i, • • • ,Xn-i] of the form in Equation @ the reduced polynomials. Hence, 
an n-variable Boolean function is identified as a reduced polynomial in F 2 [a:o, xi, • • • ,Xn-i]- 

Definition A Boolean function / over F 2 or a reduced polynomial / in F 2 [a:o,a::i, • • • ,x„_i] is called rotation symmetric if 
for each input x = {xq, xi, - ■ ■ , Xn-i) G F 2 , we have 

f(xi,X 2 , ■ ■ ■ ,Xn-l,Xo) = f{xo,Xi,- ■ ■ ,Xn-l). 

The Walsh transform of a Boolean function calculates the correlations between the function and linear Boolean functions. 
And the Walsh transform of / over F 2 is 

w/(&) = Y. 

X^¥2 

where b = ( 60 , &i, • • • ,&n-i) G and x = {xq,xi, ■ • • 

Definition A Boolean function / : F 2 —F 2 is a bent function if W/( 6 ) = ±2"/^ for any b G F 2 . 

A Boolean bent function only exists for even n. The algebraic degree of a bent function is no more than m for n = 2m > 4 
and the algebraic degree of a bent function for n = 2 is 2 . 
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Let cr be a permutation of F 2 such that for any bent function /, / o cr is also bent. Then a{x) = xA + b, where A is an 
n X n nonsingular binary matrix over F 2 , xA is the product of the row-vector x and A, and b € F 2 \ All these permutations 
form an automorphism of the set of bent functions. Two functions /(x) and g{x) = f o a(x) are called linearly equivalent. 
If f(x) is bent and L(x) is an affine function, then / + L is also a bent function. Two functions / and f o a + L are called 
EA-equivalent. The completed version of a class is the set of all functions EA-equivalent to the functions in the class. 

Maiorana and McEarland introduced independently a class of bent functions by concatenating affine functions. This 
class is called the Maiorana-McEarland class Ai of functions defined over F™ x F™ of the form 

fia,y) = yT^{a) + h{a), (3) 

where (a, y) € F™ x F™, 7 r(a) is any mapping from F™ to F™, and h{a) is any Boolean function on F™. Then / is bent if 
and only if tt is bijective. 

III. Two INFINITE CLASSES OF ROTATION SYMMETRIC BENT EUNCTIONS 

In this section, we only present two infinite classes of rotation symmetric bent functions. The proofs of the main results will 
be given in the next section. 

Theorem 3.1: Let n = 2m, j{Xq, Xi, • ■ • , Xm-i) S F 2 [Xo, Xi, • • • , Xm-i] be a reduced polynomial of algebraic degree 
d. Then the function 

m—1 

y (x) — ^ ^ “1“ “1“ ^rm * * ‘ ? ^m — 1 “1“ ^ 2 m — l) 

i^O 

is a bent function. Further, if 7 (-Ao, Xi, ■ ■ ■ , Xm-i) is rotation symmetric , then / is a rotation symmetric bent function. And 
if d > 2 , then / has algebraic degree d. 

Example 1: Let m = 6 . Then the function 

5 5 

/(x) = ^ XiXi +6 + + Xi+e) 

2—0 2—0 

is a rotation symmetric bent function of algebraic degree 6 . 

Theorem 3.2: Let n = 2m, t be an integer such that 1 < f < m — 1 and m/gcd{m, t) is odd, and 7 (Xo, Xi, - ■ ■ , Xm-i) € 
F 2 [-Ao,Xi, • • • ,Xm-i] be a reduced polynomial. Then the function 

n —1 771—1 

fti^) = J2^X^Xi+tXi+m + XiXi+t) + + ^TTii ‘ ; ^m — 1 “1“ ^2m —l) 

i— 0 i— 0 

is a bent function. Further, if 'y{Xo,Xi, ■ ■ ■ ,Xm-i) is rotation symmetric of algebraic degree d > 3, then / is a rotation 
symmetric bent function of algebraic degree d. 

Example 2: Let m = 6 and t = 2. Then the function 

11 5 

f2{x) = ^(XiXi+2Xi+6 + XiXi+ 2 ) + ^ XiXi+Q 

z—0 i— 0 

is a rotation symmetric bent function of algebraic degree 6 . 

Lemma 3.3: Let p(xo,xi, • • • ,x„_i) be a Boolean function on F 2 or a reduced polynomial in F 2 [xo,xi, • • • ,x„_i] such 
that 

( 1 ) for any 0 < i < m - 1 , g{xo, ■■■ ,Xi, • • • ,Xi+rn, ■ ■ ■ ,Xn-i) = g{xo, ■ ■ ■ ,Xi+rn, ■■■ ,Xi,--- ,x„_i). 

( 2 ) for any 0 < i < m — 1 , XiXi+m is not in the terms of g. 

(3) g is rotation symmetric. 

Then there exists a rotation symmetric polynomial 7 (Aro, Xi, - ■ ■ , X^-i) G F 2 [Aro, Xi, - ■ ■ , Xm-i] such that 

g{xQ, Xi, ‘ * * , 1 ) — T(^0 “b Xi ‘ ‘ ; ^m —1 “b X2m—l)- 

Proof: If there exists ^{Xq, Xi, - ■ ■ , X^-i) such that 

g{XQ, Xi, * * * , Xn—l') — 7(^0 “b Xmj Xi -f Xj7t,-|_i, * * * , Xm — 1 “b X2m—l)- 

Since g is rotation symmetric, then '-^{Xq,Xi, ■ ■ • ,Xm-i) is rotation symmetric. 

Now we will give the proof by the induction on algebraic degree d of g, i.e, there exits such rotation symmetric polynomial 
7 from rotation symmetric g{x) of algebraic degree d satisfying conditions ( 1 ) and ( 2 ). 

1) When p = 0 or p = 1, such 7 obviously exits. 

2) When d = 1, such 7 obviously exits. 
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3) Suppose d>2. From the conditions (1) and (2), there exists i such that 

, Xn— 1 ) —XiQ (xq j * * ‘ ? Xi— l, Xi^f-X , * * * , Xi-\-m— 15 3 ^ 2 +m+l 5 * * ' ; Xn—1 ) 

H“ Xi-\-m9 * * * 7 1 1 Xi-\-\ , * * * , X^_(- m— 17 ^i+m+ 15 * * * 7^71 — 1)5 

where g',g" £ F 2 (a;o, • • • , Xi-i, a;i+i, • • • , a;i+m-i, a^i+m+i, • • • From the condition (1), we have g' = g". From the 

induction of algebraic degree d, for g' and g", there exists • • • , Xi-i, Xi+i, • • • , Xm-i) such that 

g — g — T (^0 “f ^mi * ‘ ' j — 1 “f ^ 2 +m —1 j ^t +1 “f ^t+m+ 1 ; ‘ ‘ * j — 1 “t“ ^2m—l ) ■ 

Take 7 (Xo, Xi, • • ■ , Xm) = Xi 7 '(Xo, • • • , Xi-i, Xi+i, • • • , Xm-i). Then 

g{xQ^ Xi, ‘ * * , — 7{Xo T Xi -t- * * * ; X^^ — I -t- X 2 m —l)- 

Hence, this lemma follows. ■ 

Remark Let g{x) = + ^f+m dehned in Equation ([B- We can verify that g{x) 

satishes all the three conditions in Lemma [33] There exists ^{Xq,Xi, ■ • • ,Xm_i) such that 

m—1 

f (^) — ^ ^ XiXi-\-m ^(^Xq “h Xm-} * * ‘ 7 ^m — 1 ^2m —l) 

is bent. This shows that rotation symmetric bent functions constructed by Su and Tang ia are contained in functions in 
Theorem 13.21 


IV. Proofs of main results 

In this section, we give the proofs of our main results on rotation symmetric bent functions. 


A. The proof of Theorem 13.71 

For any function 7 on F™, the function 

m— 1 

fo{a,y) = ^ 2 / 2 ai + 7 (ao,ai,--- , 0 ^- 1 ) 

is a bent function on F™ x F™ in the Maiorana-McFarland class Xi of functions dehned in Equation @. Take the nondegenerate 
linear transform on fo{a,y) as 


Vi = Xi, 

Oi — Xi -f Xi-^-Yn: 

where 0 < 7 < m — 1. We have a bent function 

771—1 

fl (^0 7 7 * ‘ * 7 ^71—1 ) - ^ ^ Xi (^Xi “h Xi-\-ijl'} “1“ 7(^0 “1“ ^7717***7 ^777 — 1 “1“ ^2777- —1 ) 

Z=^0 

777—1 777—1 

— ^ ^ “t“ 7(^0 “t“ ^7777 ' * * 7 ^771—1 “1“ ^2777 —1) ^ ^ Xi . 

2=^0 7—0 

Since ^ linear function, then f{x) = /i + ^ function. Further, if 7 is a rotation symmetric 

polynomial in F 2 [Xo,Xi, • • • then f{x) is also rotation symmetric. 

If 7 (Xo, 2 fi, • ■ • has algebraic degree d, then 7 ( 0:0 + Xm, * * • ,^ 777-1 + ^ 2 m-i) has algebraic degree d. If d > 3, 

then the algebraic degree of / is d. Otherwise, / has algebraic degree less than 2. Thus, / has algebraic degree 2 since / is 
bent. Hence, Theorem 13.11 follows. 
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B. The proof of Theorem 13.21 

We start with the following lemma for the proof of Theorem 13.21 
Lemma 4.1: Let n = 2m, 1 < t < m — 1, and xo,Xi, ■ ■ ■ ,Xn-i G IF' 2 . Then 

(1) Etoi^ 

(2) ^^2—0 “1“ m — i{^i^«+Tn+i H“ ^z+m^i+t)- 

(2) ^^ 2=0 H“ ‘^i-\-m — t^i-\-m H“ ‘^i^i-\-m-\-t H \~'^i—t^i-\-m ) — H“ ^^2ii—m — t ^z+m “t“ 1) (^z+i H“ ^z+m+i “t“ 

1 ) + + 3^z+t + ^z+m + ^z+m+i + 1 )- 

(4) ^^2—0 ^z^z+m (^z+i “1“ ^z+m+i) — ^!^z^0 ^z^z+i^z+m- 

(5) Let 0 ^ ^ TTL 1, ^2 — ^z+m H” I 5 3.n(l 0-2 — Xi ~h “h 1- Xhcil (ci 2 ^ 2 +i “1“ ^z+i H” ^z+m —i)yz — ^z^z+m (^z+i H“ 

^z+771+i) “ 1 “ ^z^z+m H“ (^z^z+i H“ ^z+m —i^z+m) H“ {^z^z+m+i “ 1 “ ^z+m^z—f) H“ ^z H“ ^z+m ~\~ ^z+m—i H“ ^i—t H“ 1 - 

Proof: (1) 


m— 1 


n—1 


2m —1 


m —1 


( 2 ) 


X! (2^i2;i+t + Xi+rn-tXi+m) — a^ia;i+t + XiXi+t + E ^z+m—i ^z+m 

z=0 z=0 i—m i—0 

n—1 2m —1 2m —t —1 


— ^ ^ ^z^z+i ^ ^ ^z^z+i H” ^ ^ ^z^z+i 

z=0 i—m i—m — t 

n—1 m—1 2m —1 

— ^ ^ ^z^z+i “t” ^ ^ ^z^z+i E ^ ^ ^z^z+i 

z=0 i—m—t i—2m—t 

n—1 m—1 

= ^ X2X2+i + ^ (^ 2 X 2 +* + X2+mXz+m+t)- 


z=0 


z=0 


^ ^ (x^Xi+m+t H“ X2_tX2+m) — ^ ^ X^Xi+m+t X ^ ^ X^X^+m+i 

z=0 i—2m — t 

m—1 2m —1 

— ^ ^ X2X2+m+i H" ^ ^ XfXi+m+i 


i—m — t 
m— 1 


— ^ ^ (XzX2-(_272-|-i Xi-\-mXi-\-tf 


(3) Let S — y —Q (^XiXi-\-t Xi-\-ui—t^i-\-m H” x^x^+m+i H” X 2 —iX 2 +m)' FroiTi results (1) 3,nd (2), 

n — 1 m—1 

S — ^ ^ XiXi-\-t -\- ^ ^ (^2X2+^ Xi -\- uiXi -\- m-\-t “t“ XiXi -\- m-\-t “t“ Xi -\- tXi -\- m '} 

i—0 i—m — t 

n — 1 m—1 

— ^ ^ X^X^+i “h ^ ^ (Xi H“ X2+m)(X2+£ H“ X^+m+i) 

z=0 i—m — t 

n—1 m—1 m—1 

— ^ ^ X^X^+i “h ^ ^ (Xi H“ X2+m H“ l)(x2+£ H“ X^+m+t “h 1) “h ^ ^ (x^ H“ X2+£ Xi-\-m Xi+m+t “1“ !)■ 

z=0 i—m — t i—m—t 

(4) 


m — 1 m—1 m—1 

E! 2;ia;i+m(a^i+t + a^t+m+t) = E] 2;ia;i+ta:i+m + E X2-|-mX2+m+£X2 

z—0 z—0 z=0 

m—1 2m —1 


— ^ ^ X2X2+tX2+m “h ^ ^ X 2 X 2 


+£ X2+m 


z=0 

n—1 


— ^ ^ X2X2+£X2+ri 


z=0 
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(5) Let B — “h di-\-t di-\-m—t^yi- Then 

B =((cZj di-\-m—t)yi 

= {Xi Xi-\-m — t H“ 1)^2 “t“ 0>rn—t-\-iyi 

— “1“ ^i+m)(^'i+i T — t H“ 1) H“ 0"m—t-\-iyi 

—Xi(yXi-\-rn “h 1) + dm — t+iyi 

=Xi{XiJ^rn + l)(3:^2+i + + 1) + {Xm-t-\-i + + l)(^2+m + !)■ 

Hence, this result can be obtained directly. ■ 

Define a class of functions on x of the form 

m —1 

fo{d,y) = ^ 7Ti{d)yi + 7(1 + a) + /^o(a), 

where a, y G 1 F 2 , 7 rj(Q) — -t- “h ^z+m—^o(^) — tind ^ G ]F 2 [^ 0 ; 5 ‘ ) ^zn—i]- Since 

m/gcd{m, t) is odd, then from Gao et al. fTi \ [Proof in Theorem 1], (ao, oi, • • • , Qm-i) i—>■ ( 7 ro(a), 7 ri(a), • • • , TTm-i{a)) is a 
permutation of F™. Then fo{a,y) is a bent function. Take the affine transform on /o(a,y) as 

Ui — a^z+m T Ij ^z — ^z+m “t“ 1, 0 ^ ^ TTl 1. 

This affine transform is nondegenerate. Hence, fi{x) = fo{xo + Xm + 1, • • • , Xm-i + X 2 m-i + 1, a^m + 1, • • • , X 2 m-i + 1) is 
also bent. From Lemma ItTI 

771—1 

/i(3^) = H {didi+t + Oz+t + )yi + fio(a) +7(a:o + ^7715 * ‘ ) ^771 — 1 “1“ ^2771 —l) 

2=0 

71—1 771 — 1 

= ^{XiX,+tXi+m + X,Xi+t) + XiX,+„, + 7(X0 + 3^771 J * * * 7 ^771—1 H“ ^2771— 1 ) 

2=0 2=0 

771—1 

“t“ ^ ^ {Xi -\- XiJ^jYi -\- Xi-\-t-\-m T 1) H“ /lo(^) 

i—m—t 

771—1 771 — 1 

T ^ ^ (^2 T ^2+771 “1“ ^2+771+i H” 1) T ^ ^ (^2 T ^2+771 H“ ^2+771 —f — t l) 

i—m—t 2=0 

71—1 771 — 1 

= Yi^i^^+tXi+m + X,Xi+t) + Y a^ia;z+m + 7 ( 2^0 + 3^771 ; * * * 7 ^771—1 + X2m-l) + L{x), 

2=0 2=0 

where L{x) = + ^i+m + Xi+m+t + 1) + + Xi+m-t + Xi-t + 1) is an affine function. Hence, 

we have 

f{x) = fi{x) + L{x) 

is a bent function. When 7 is rotation symmetric, f(x) is also rotations symmetric. Obviously, if 7 has algebraic degree d > 3, 
then / is also a function of algebraic degree d. Hence, Theorem 13.21 follows. 

Remark From the proofs of Theorem 13.11 and Theorem 13.21 bent functions in both theorems are in the completed Maiorana- 
McFarland class of bent functions. 


V. CONCLUSION 

In this paper, we propose a systematic method for constructing n-variable rotation symmetric bent functions from some 
functions in the Maiorana-McFarland class. One class of rotation symmetric bent functions has algebraic degree ranging from 
2 to TO and the other class has algebraic degree ranging from 3 to to. 
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